Program Executed Using Proxy/Local Command Via SSH.EXE

Rule Info

Name

Program Executed Using Proxy/Local Command Via SSH.EXE

Author

frack113, Nasreddine Bencherchali

Description

Detect usage of the "ssh.exe" binary as a proxy to launch other programs.

Reference

Date

2022-12-29 00:00:00

Modified

2023-01-25 00:00:00

7d6d30b8-5b91-4b90-a891-46cccaf29598

Rule History

Author

Title

Date

Commit

Nasreddine Bencherchali

Merge PR #4937 from @nasbench - Multiple updates and fixes

2024-08-29

Nasreddine Bencherchali

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12

github-actions[bot]

Merge PR #4611 from @nasbench - Promote Older Rules Status From `experimental` To `test`

2023-12-01

Nasreddine Bencherchali

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18

Nasreddine Bencherchali

feat: updates and fixes

2023-01-26

frack113

Add missing lolbin OSBinaries (#3835)

2022-12-29